Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 160 of 215.
- CVE-2020-15147 Remote Code Execution in Red Discord Bot
- CVE-2020-15146 Remote Code Execution in SyliusResourceBundle
- CVE-2020-15145 Local privilege elevation in Composer-Setup for Windows
- CVE-2020-15143 Remote Code Execution in SyliusResourceBundle
- CVE-2020-15142 Arbitrary Code Generation
- CVE-2020-15141 Path Traversal in openapi-python-client
- CVE-2020-15140 Remote Code Execution in Red Discord Bot
- CVE-2020-1514 Microsoft Office SharePoint XSS Vulnerability
- CVE-2020-15139 XSS in MyBB
- CVE-2020-15138 Cross-Site Scripting in Prism
- CVE-2020-15137 Integer overflow in HoRNDIS
- CVE-2020-15136 Improper authentication in etcd
- CVE-2020-15135 CSRF vulnerability in save-server
- CVE-2020-15134 Missing TLS certificate verification in Faye
- CVE-2020-15133 Missing TLS certificate verification in Faye Websocket
- CVE-2020-15132 Reset Password / Login vulnerability in Sulu
- CVE-2020-15131 False-positive validity for NFT1 genesis transactions in SLP Validate
- CVE-2020-15130 False-positive validity for NFT1 genesis transactions in SLPJS
- CVE-2020-1513 Windows CSC Service Elevation of Privilege Vulnerability
- CVE-2020-15129 Open redirect in Traefik
- CVE-2020-15128 Reliance on Cookies without validation in OctoberCMS
- CVE-2020-15127 Denial of service in Contour
- CVE-2020-15126 Information disclosure through Viewer query in parse-server
- CVE-2020-15125 Authorization header is not sanitized in an error object in auth0
- CVE-2020-15124 Path traversal in Goobi viewer Core
- CVE-2020-15123 Command injection in codecov (npm package)
- CVE-2020-15121 Command injection in Radare2
- CVE-2020-15120 Authorization Bypass in I hate money
- CVE-2020-1512 Windows State Repository Service Information Disclosure Vulnerability
- CVE-2020-15119 DOM-based XSS in auth0-lock
- CVE-2020-15118 Cross-Site Scripting in Wagtail
- CVE-2020-15117 Denial of Service in Synergy
- CVE-2020-15115 No minimum password length in etcd
- CVE-2020-15114 Denial of Service in etcd
- CVE-2020-15113 Improper Preservation of Permissions in etcd
- CVE-2020-15112 Improper Input Validation in etcd
- CVE-2020-15111 CRLF vulnerability in Fiber
- CVE-2020-15110 Possible pod name collisions in jupyterhub-kubespawner
- CVE-2020-1511 Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability
- CVE-2020-15109 Ability to change order address without triggering address validations in solidus
- CVE-2020-15108 SQL Injection in glpi
- CVE-2020-15107 x87 FPU operations in enclaves are vulnerable to ABI poisoning in openenclave
- CVE-2020-15106 Improper Input Validation in etcd
- CVE-2020-15105 In Django Two-Factor Authentication, user passwords are stored in clear text in the Django session
- CVE-2020-15104 TLS Validation Vulnerability in Envoy
- CVE-2020-15103 Integer Overflow in FreeRDP
- CVE-2020-15102 Improper access control on dashboard form in PrestaShop
- CVE-2020-15101 Nested directory structure can lead to Uncontrolled Resource Consumption in freewvs
- CVE-2020-15100 Uncontrolled Resource Consumption in freewvs
- CVE-2020-1510 Win32k Information Disclosure Vulnerability
- CVE-2020-15099 Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS
- CVE-2020-15098 Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS
- CVE-2020-15097 Path Traversal in loklak
- CVE-2020-15096 Context isolation bypass via Promise in Electron
- CVE-2020-15095 Sensitive information exposure through logs in npm cli
- CVE-2020-15094 RCE in Symfony
- CVE-2020-15093 Improper verification of signature threshold in tough
- CVE-2020-15092 Stored XSS in TimelineJS3
- CVE-2020-15091 Denial of Service in TenderMint
- CVE-2020-1509 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
- CVE-2020-15087 Privilege escalation in Presto
- CVE-2020-15086 Potential Remote Code Execution in TYPO3 with mediace extension
- CVE-2020-15085 Client caching login operation with plaintext password in Saleor Storefront
- CVE-2020-15084 Authorization bypass in express-jwt
- CVE-2020-15083 Reflected XSS when uploading an image in the Product page in PrestaShop
- CVE-2020-15082 External control of configuration setting in the dashboard in PrestaShop
- CVE-2020-15081 Information exposure in the upload directory in PrestaShop
- CVE-2020-15080 Information disclosure in release archive in PrestaShop
- CVE-2020-1508 Windows Media Audio Decoder Remote Code Execution Vulnerability
- CVE-2020-15079 Improper access control in PrestaShop
- CVE-2020-15078 Auth bypass in OpenVPN
- CVE-2020-15077 Auth bypass in OpenVPN Access Server
- CVE-2020-15076 Path traversal in Private Tunnel
- CVE-2020-15075 Other in OpenVPN Connect
- CVE-2020-15074 Auth bypass in OpenVPN Access Server
- CVE-2020-15073 Cross-site scripting in phplist:phplist
- CVE-2020-15072 SQL injection in phplist:phplist
- CVE-2020-15071 Cross-site scripting in getsymphony:symphony
- CVE-2020-15070 Code injection in zulip:zulip server
- CVE-2020-1507 Microsoft COM for Windows Elevation of Privilege Vulnerability
- CVE-2020-15069 Sophos XG Firewall Buffer Overflow
- CVE-2020-15065 Memory corruption in digitus:da-70254 firmware
- CVE-2020-15064 Cross-site scripting in digitus:da-70254 firmware
- CVE-2020-15063 Auth bypass in digitus:da-70254 firmware
- CVE-2020-15062 Information disclosure in digitus:da-70254 firmware
- CVE-2020-15061 Memory corruption in lindy-international:42633 firmware
- CVE-2020-15060 Cross-site scripting in lindy-international:42633 firmware
- CVE-2020-1506 Windows Start-Up Application Elevation of Privilege Vulnerability
- CVE-2020-15059 Auth bypass in lindy-international:42633 firmware
- CVE-2020-15058 Information disclosure in lindy-international:42633 firmware
- CVE-2020-15057 Memory corruption in tp-link:tl-ps310u firmware
- CVE-2020-15056 Cross-site scripting in tp-link:tl-ps310u firmware
- CVE-2020-15055 Auth bypass in tp-link:tl-ps310u firmware
- CVE-2020-15054 Information disclosure in tp-link:tl-ps310u firmware
- CVE-2020-15053 Cross-site scripting in articatech:artica proxy
- CVE-2020-15052 SQL injection in articatech:artica proxy
- CVE-2020-15051 Cross-site scripting in articatech:artica proxy
- CVE-2020-15050 Path traversal in supremainc:biostar 2
- CVE-2020-1505 Microsoft SharePoint Information Disclosure Vulnerability
- CVE-2020-15049 Other in fedoraproject:fedora